This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer File: lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer (raw, json) Hash identifier: SqdHGEs6D2CTvPyI4E9HVgZgb0SCDV2BtPJ12Lrmbk0= Subject key identifier: 94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F828E50C4B5712BE301D2963292D246 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31221 AS: 209468 IP: 5.252.56.0/22 IP: 185.43.36.0/22 IP: 217.13.48.0/20 IP: 2a02:6f0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:8e:50:c4:b5:71:2b:e3:01:d2:96:32:92:d2:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d9:e3:40:d9:b5:dd:11:31:2d:e0:da:5b:e6: 59:89:95:5b:75:06:09:7b:fc:11:44:12:52:e4:3c: f1:e3:65:cb:ab:73:8c:1b:f1:32:ff:fc:e3:03:4b: 46:3b:07:20:1f:79:d9:c5:78:9d:5b:d8:68:23:90: 11:08:bf:08:1d:ad:db:b9:dc:42:43:3b:03:9c:33: 36:e3:ae:63:9c:c0:dd:d2:d1:84:4c:bb:4d:a8:a7: 16:9f:da:76:39:e0:19:a6:27:04:26:6a:b0:4a:76: 4d:76:50:b4:2d:f4:b1:3f:d0:cd:87:01:b5:0f:8b: 43:a2:ad:83:7a:27:82:8b:1e:50:7a:75:5c:73:c1: f8:ba:15:c4:fa:70:27:80:aa:8d:30:2f:bd:87:32: 2c:01:dd:8d:6f:39:0a:72:f3:41:38:ad:7a:50:5a: d8:0b:f4:08:f6:c6:8d:1f:7b:27:ae:81:d2:ca:a7: ee:9b:fe:b0:8f:1f:85:cf:9b:6e:48:44:9e:3e:81: 4b:1e:07:1c:2e:ca:0a:03:22:25:b1:e2:49:e6:34: 10:37:8e:06:d3:5d:27:05:53:83:43:84:a3:f7:53: bf:37:4a:ed:e7:2a:a5:36:e6:df:cd:ce:0a:44:38: 51:a5:1c:31:6b:63:9e:70:ed:9e:04:d7:8f:0e:22: e8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.56.0/22 185.43.36.0/22 217.13.48.0/20 IPv6: 2a02:6f0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31221 209468 Signature Algorithm: sha256WithRSAEncryption 80:fd:07:21:77:c8:6b:f9:b2:f0:54:f5:59:08:da:cd:1e:23: 74:d8:ac:1d:46:c9:b3:37:35:a2:97:3c:f0:39:e8:93:af:95: 73:56:06:3b:fd:94:24:e7:27:e5:d6:5f:5d:f6:ba:2c:b4:b3: 13:02:86:3f:0b:b7:43:bf:46:cb:6e:ab:c9:d7:dc:e5:8d:f6: 1e:d2:b6:b9:cc:60:37:29:3c:2b:1b:9a:29:e7:7f:6e:9a:65: 8a:34:c5:c1:51:5e:c7:3f:26:42:ec:c9:3e:7d:5e:c7:f4:04: 7c:b2:5e:50:f8:61:4c:eb:f9:a8:e9:5b:3c:fc:89:cc:05:b5: 7b:27:7a:45:e0:1b:1d:38:7d:c5:1b:6c:f5:64:63:35:49:1f: 3d:2b:86:06:8a:ce:05:f3:ce:f0:c9:a6:ec:e2:3b:e2:fd:38: f4:8f:f5:80:63:c2:e8:78:57:a4:36:08:b2:08:a5:ef:c7:a9: 33:50:af:c7:20:96:25:39:23:0b:27:14:52:19:b7:f5:e5:d9: 40:c7:f8:bd:99:79:62:c4:16:71:5a:77:26:b0:80:95:18:ed: 8e:85:b3:68:91:03:a5:21:d6:9f:d7:60:09:77:b3:d1:4b:02: 18:a0:5f:32:09:0d:84:52:67:b6:1c:14:dc:15:e4:52:c0:04: 12:ff:74:c2 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZt/go5QxLVxK+MB0pYyktJGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDgxZTk0NmNmYzhlMTljMTY2N2FmMzc1ZDEwYTFlNDA0MmYwZWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktnjQNm13RExLeDaW+ZZiZVbdQYJ e/wRRBJS5Dzx42XLq3OMG/Ey//zjA0tGOwcgH3nZxXidW9hoI5ARCL8IHa3budxC QzsDnDM2465jnMDd0tGETLtNqKcWn9p2OeAZpicEJmqwSnZNdlC0LfSxP9DNhwG1 D4tDoq2DeieCix5QenVcc8H4uhXE+nAngKqNMC+9hzIsAd2NbzkKcvNBOK16UFrY C/QI9saNH3snroHSyqfum/6wjx+Fz5tuSESePoFLHgccLsoKAyIlseJJ5jQQN44G 010nBVODQ4Sj91O/N0rt5yqlNubfzc4KRDhRpRwxa2OecO2eBNePDiLoVQIDAQAB o4ICvzCCArswHQYDVR0OBBYEFJSB6UbPyOGcFmevN10QoeQELw65MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyLzEzYzMz YS1hNDZmLTQ4ODktYjgwOS01NzMwM2FhNDVjYmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvMTNjMzNh LWE0NmYtNDg4OS1iODA5LTU3MzAzYWE0NWNiYi8xL2xJSHBSc19JNFp3V1o2ODNY UkNoNUFRdkRyay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCBfw4AwQCuSskAwQE2Q0wMA0EAgACMAcDBQAq AgbwMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAnn1AgMDMjwwDQYJKoZIhvcNAQEL BQADggEBAID9ByF3yGv5svBU9VkI2s0eI3TYrB1GybM3NaKXPPA56JOvlXNWBjv9 lCTnJ+XWX132uiy0sxMChj8Lt0O/Rstuq8nX3OWN9h7StrnMYDcpPCsbminnf26a ZYo0xcFRXsc/JkLsyT59Xsf0BHyyXlD4YUzr+ajpWzz8icwFtXsnekXgGx04fcUb bPVkYzVJHz0rhgaKzgXzzvDJpuziO+L9OPSP9YBjwuh4V6Q2CLIIpe/HqTNQr8cg liU5IwsnFFIZt/Xl2UDH+L2ZeWLEFnFadyawgJUY7Y6Fs2iRA6Uh1p/XYAl3s9FL AhigXzIJDYRSZ7YcFNwV5FLABBL/dMI= -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:36 2026 by rpki-client